IN THE CLAIMS : 

Please amend claims 1-21, 23-28, and 30 as follows. 

1. (Currently Amended) A method , comprising: fef 

determining an address of a network node for a certificate is s uance and delivery 
procedure, said 

network node serving a certificate authority in a visited network where the 
subscriber cun^ently locates in a mobile communication system, the method comprising: 

maintaining in the— a mobile communication system subscriber's location 
information; 

receiving a message from subscriber's user equipment said message indicating 
that an address of a network node for certificate issuance and delivery procedure in a 
visited network is requested by the subscriber's user equipment; and 

determining, in response to receiving a -the m essage from subscriber's user 
equipment, said message indicating that the address of the network node in the visited 
network is requested , on the basis of the subscriber's location information^ the address of 
the network node. 

2. (Currently Amended) The method of claim 1, wherein further comprising: 
receiving in t he message from subscriber's user equipment further indicat es t he 

address of the network node , and the m e thod furth e r comprises:; 
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checking whether or not the address which the message indicated corresponds to 
the address determined on the basis of the location information; and 

if they do not correspond to each other, using the address determined on the basis 
of the location information. 

3. (Currently Amended) The method of claim 1, wherein further comprising: 
receiving further in t he message mcludes subscriber's location informationr^and 

the method further comprises:; 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 

using the maintained location information if it does not correspond to the location 
information in the message. 

4. (Currently Amended) A metho d, comprising: 

for determining an address of a network node for a certificate issuance and 
delivery procedure, said netw^ork node serving a certificate authority in a mobile 
communication system, the network node being in a location network of a subscriber, 
said location network being a visited network of the subscriber, the method comprising: 

receiving in the-a^mobile communication system a message from subscriber's user 
equipment, the message indicating subscriber's location information in a visited network 
of the subscriber ; and 
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determining, in response to the message, on the basis of the subscriber's location 
information^ the-an address of the-a.network node in the visited network , wherein the 
address of the network node is determined for certificate issuance and deUverv procedure 
in the visited network . 

5. (Currently Amended) The method of claim 4, wher e in further comprising: 
receiving in t he message from subscriber's user equipment further contains a 

global cell identifier which indicates the subscriber's location information. 

6. (Currently Amended) A metho d, comprising: 

for transmitting, to subscriber's us e r equipment, information required for a 
certificate issuance service in another network than a home network in a mobile 
communication system, the method comprising: 

authenticating the subscriber; and 

transmitting during the subscriber authentication t o the user equipment at least part 
of the information required for obtaining tiie-a_certificate from a certificate issuance 
service in the othe r another network than a home network in a mobile communication 
svstem d wing - after t he subscriber authentication. 



7. (Currently Amended) The method of claim 6, wh e rein further comprising: 
performing t he authentication is -as an application level authentication. 
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8. (Currently Amended) The method of claim 6, whefetfl -further comprising: 
utilizing t he user equipment utiliz e s said part of the information during a 

certificate issuance procedure after the authentication in a visited networ k bv the user 
equipment . 

9. (Currently Amended) The method of claim 6, wherein further comprising: 
transmitting in said part of the information is—as location network specific 

information. 

10. (Currently Amended) The method of claim 6, wherein further comprising: 
transmitting in said part of the information comprises at least an address of a 

network node via which the service is provided. 

1 1 . (Currently Amended) The method of claim 6, wherein further comprising: 
transmitting in said part of the information comprises at least a public key required 

for the certificate issuance service. 

12. (Currently Amended) The method of claim 6, wherein further comprising: 
transmitting in said part of the information comprises at least an indication of the 

protocol required for the certificate issuance service. 
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1 3 . (Currently Amended) The method of claim 6, wbeFein -further comprising: 
the service is c e rtificate issuance service and 

transmitting in said part of the information comprises at least an address of a 
network node via which the certificate issuance service is provide d to the user equipment; 
and the method further comprising 

transmitting from the user equipment a certificate request to the network node. 

14. (Currently Amended) A method , comprising: 

for transmitting, to subscriber's user equipment, information required for a 
certificate issuance service in another network than a home network in a mobil e 
communication system, the method comprising: 

authenticating the-a_subscriber; 

receivin g, from subscriber's user equipment a message relating to tfte -a certificate 
issuance service in another network than a home network in a mobile communication 
system : and 

transmitting, in response to the message, to the user equipment in a reply message 
at least part of #ie-information required for obtaining the-a.certificate from the certificate 
issuance service in the other network in response to the received message . 
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15. (Currently Amended) The method of claim 14, wherein fiirther 
comprising: 

transmitting the message and the reply message arc transmitted in an integrity 
protected channel. 

16. (Currently Amended) The method of claim 15, wherein fiirttier 
comprising: 

the message is transmitted from the user equipment 

requesting . the message is requ e sting an address of a network node via which the 
certificate issuance service is provided in the message: and 

transmitting in said part of the information comprises at least the requested 
address. 

17. (Currently Amended) The method of claim 16, further comprisingi 
transmitting fi-om the user equipment a certificate request to the network node. 

18. (Currently Amended) The method of claim 14, wherein further 
comprising: 

transmitting in said part of the information comprises at least a public key required 
for the certificate issuance service. 
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19. (Currently Amended) The method of claim 15, wherein further 
comprising: 

transmitting in said part of the information compri s es at least an indication of the 
protocol required for the certificate issuance service. 

20. (Currently Amended) The method of claim 11, wherein further 
comprising: 

configuring the message to felates -relate t o a certificate issuance service. 

2 1 . (Currently Amended) A mobile communication system^ comprising! 
at least user equipment!^ 

a.home network for the user equipment; and 

a visited network comprising at least a network node for a certificate issuance and 
delivery procedure, said network node serving a certificate authority, the system being 
configured to determine wherein an address of the network node is determined on the 
basis of location information of the user equipmen t in response to a sent message from 
the user equipment, said message indicating than an address of a network node for 
certificate issuance and delivery procedure in a visited network is requested bv the user 
equipment . 

22. (Cancelled) 
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23. (Currently Amended) The system of claim 21 comprising figtfier 
comprising: 

a gateway network for certificate requests in a home network of the user 
equipment, the gateway network being configured to perform the network node address 
determination. 

24. (Currently Amended) The method of claim 1, wherein further comprising: 
configuring t he message includes t o comprise subscriber's location informationj 

and the method further comprises:; 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 

if it does not correspond to the location information in the message, sending an 
error indication by using the maintained location information. 

25. (Currently Amended) The method of claim 1, wherein further comprising: 
configuring t he message includes t o comprise subscriber's location information^ 

and the method further comprises:; 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 
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using the location information in the message if it does not correspond to the 
maintained location information. 

26. (Currently Amended) The method of claim 1, wherein further comprising: 
configuring t he message includes t o comprise subscriber's location information, 

and the method furth e r comprises 

checking whether or not the location information in the message corresponds to 
the location information maintained in the system; and 

if it does not correspond to the maintained location information, sending an error 
indication by using the location information in the message. 

27. (Currently Amended) A metho d, comprising: 

for transmitting to subscriber's user equipment information required for a 
certificate issuance serv^ice in a mobile communication system, the method comprising: 
authenticating the-a^subscriber; and 

transmitting after the authentication via an authenticated channel t o the 
subscriber's user equipment at least part of Sie-information required for a certificate of 
issuance service in another network than a home network of the subscribe r using an 
authenticat e d channel , said at least part of the information containing information 
required for obtaining tbe-a^certificate from the certificate issuance service in another 
network than a hom e network of the subscriber . 
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28. (Currently Amended) A network node in a mobile communication system, 
wherein the network node is in a home network of a subscriber and is arranged 
configured t o determine, in response to receiving a message indicating a request for a 
certificate issuance service from the subscriber, an address of another network node 
required for providing the certificate issuance service for the subscriber on the basis of 
subscriber's location information, said another network node being in another network 
than the home network. 

29. (Previously Presented) The network node of claim 28, wherein the other 
network node is in a visited network. 

30. (Currently Amended) User equipment in a mobile communication system, 
wherein the user equipment is arranged configured t o receive at least part of information 
required for a certificate issuance service in a location network of the user equipment 
after the user equipment has been authenticated, said location network being a visited 
network and said at least part of the information containing information required for 
obtaining #ie-a_certificate from the certificate issuance service in the visited network. 
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31. (Previously Presented) The user equipment of claim 30, wherein the user 
equipment is arranged to receive said part of the information from a network node with 
which the user equipment was authenticated, the network node being in a home network. 
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